CVE-2024-53270

Envoy is a cloud-native high-performance edge/middle/service proxy. In affected versions "sendOverloadError" is going to assume the active request exists when "envoy.loadshedpoints.http1serverabortdispatch" is configured. If "activerequest" is nullptr, only onMessageBeginImpl is called. However,...

CVE-2024-53270: Always-Incorrect Control Flow Implementation

Envoy is a cloud-native high-performance edge/middle/service proxy. In affected versions sendOverloadError is going to assume the active request exists when envoy.loadshedpoints.http1serverabortdispatch is configured. If activerequest is nullptr, only onMessageBeginImpl is called. However, the...